Notice: While JavaScript is not essential for this website, your interaction with the content will be limited. Please turn JavaScript on for the full experience.

Python 3.7.14

Release Date: Sept. 6, 2022

Note: The release you are looking at is a security bugfix release for the legacy 3.7 series which has now reached end-of-life and is no longer supported. See the downloads page for currently supported versions of Python. The final source-only security fix release for 3.7 was 3.7.17.

Please see the Full Changelog link for more information about the contents of this release and see What’s New In Python 3.7 for more information about 3.7 features.

The sigstore information for this release was updated on 2023-07-14. The release tarball files were not changed.

Security content in this release

  • CVE-2020-10735: converting between int and str in bases other than 2 (binary), 4, 8 (octal), 16 (hexadecimal), or 32 such as base 10 (decimal) now raises a ValueError if the number of digits in string form is above a limit to avoid potential denial of service attacks due to the algorithmic complexity.
  • gh-87389: http.server: Fix an open redirection vulnerability in the HTTP server when an URI path starts with //.
  • gh-93065: Fix contextvars HAMT implementation to handle iteration over deep trees to avoid a potential crash of the interpreter.
  • gh-80254: Raise ProgrammingError instead of segfaulting on recursive usage of cursors in sqlite3 converters.

Full Changelog


Version Operating System Description MD5 Sum File Size GPG Sigstore
Gzipped source tarball Source release dd65d6708e9c28a9e4fd2e986776ad14 22.9 MB SIG .sigstore
XZ compressed source tarball Source release 0acdd6e1a95f49ee7f9b338fb6092b65 17.3 MB SIG .sigstore